PatchGap
WebKit · WebKit

CVE-2026-112699

Logic Error in WebKit
Medium webkit Logic Error

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
ImpactProcessing maliciously crafted web content may result in the disclosure of process memory
DescriptionAn out-of-bounds read was addressed with improved bounds checking.
ComponentWebKit
Bug ClassLogic Error
Tracker323130
CISA KEVNot listed
Creditedan anonymous researcher
Disclosed2026-10-26

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page